Unable to authenticate

[Atifah Abdul Latif]

Hi All,

Has anyone experienced an error "Unable to authenticate" when putting the RADIUS code? We encounter the error, but it gets resolved by itself. Did try checking the validation logs but it has been purged and we couldn't investigate further. From the radius server, it logs below error:

RadiusAuthenticationProvider.Authenticate. Unexpected response code: RadiusCode AccessReject

On the secret server, this error was logged - "AuditUserError: TWO FACTOR AUTH UNAVAILABLE"

Any reason why this happened?

Thanks,

Atifah

[Andreas Horlacher]

AccessReject generally indicates an invalid 1st (LDAP password) or 2nd factor (security code) was used. You can review the user transactions in VIP Manager for additional clues. Without the validation server logs, it's hard to speculate the root cause. 

------------------------------
Kind regard,
Andreas
------------------------------

[Namish Tiwari]

Hi Atifah,

Thank you for reaching out.

This issue will be best handled via support case and the Validation server log file will be required to investigate the issue. How often this issue happens? What is the secret server you are referring to here and the log message indicates there are glitches to reach the Validation server and that is why the TWO FACTOR AUTH UNAVAILABLE message as VIP will be the provider in this case for two factor. Is there more details logging on the Secret server? If issue is of network glitch then the Validation server may not have details of the error message and we have to solely rely on the Secret server debug messages to investigate.

-Namish

[Atifah Abdul Latif]

Hi Andreas & Namish,

Thanks a lot for your advice.

-Atifah